16

Just noted that you can´t sign Android APKs with the Java 1.7 jarsigner. So I wonder why this is and what is the difference between the 1.6 and 1.7 signer?

Community
  • 1
  • 1
Martin
  • 11,577
  • 16
  • 80
  • 110

2 Answers2

11

This is because the default digest algorithm for Java 1.7 is SHA-256 while for Java 1.6 it's SHA1withDSA.

Java 1.6 Jarsigner docs

Java 1.7 Jarsigner docs

Wojciech Owczarczyk
  • 5,595
  • 2
  • 33
  • 55
  • 1
    Thanks. Now I just have to find out how to tweak maven to use the right jarsigner and / or the correct sigalg. – Martin Jan 05 '12 at 10:55
6

Yes you CAN use 1.7!

It is very tricky to find info on the usage with 1.7, but once found it is reasonable simple:

For keytool include

-sigalg SHA1withDSA -keyalg DSA -keysize 1024

For jarsigner include

-sigalg SHA1withDSA -digestalg SHA1

(1024 is the maximum and works, less might do the trick)

Eske Rahn
  • 1,137
  • 12
  • 11